Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fh6g-c662-cccm

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers an "index out of range" condition. NOTE: this issue is disputed by multiple third parties because the described attack scenario does not cross a privilege boundary.

** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers an "index out of range" condition. NOTE: this issue is disputed by multiple third parties because the described attack scenario does not cross a privilege boundary.

EPSS

Процентиль: 74%
0.0147
Низкий

7.5 High

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 8 лет назад

Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers an "index out of range" condition. NOTE: this issue is disputed by multiple third parties because the described attack scenario does not cross a privilege boundary

CVSS3: 7.5
nvd
около 8 лет назад

Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers an "index out of range" condition. NOTE: this issue is disputed by multiple third parties because the described attack scenario does not cross a privilege boundary

CVSS3: 7.5
debian
около 8 лет назад

Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause ...

CVSS3: 7.5
altlinux
почти 8 лет назад

ALT-PU-2018-2831: package `telegram-desktop` update to version 1.5.1-alt1

EPSS

Процентиль: 74%
0.0147
Низкий

7.5 High

CVSS3

Дефекты

CWE-617